CVE-2024-45580: Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45580?
CVE-2024-45580 is classified as a high severity vulnerability due to its potential for memory corruption from multiple IOCTL calls.
How do I fix CVE-2024-45580?
To mitigate CVE-2024-45580, users should apply the latest firmware updates provided by Qualcomm for affected devices.
Which devices are affected by CVE-2024-45580?
CVE-2024-45580 affects various Qualcomm firmware including FastConnect 6900, FastConnect 7800, and several Snapdragon models.
What are the potential impacts of CVE-2024-45580?
Exploitation of CVE-2024-45580 could lead to unauthorized access and manipulation of system memory, potentially compromising device integrity.
How does CVE-2024-45580 impact system security?
CVE-2024-45580 poses a significant risk as it may allow attackers to execute arbitrary code or crash the system through improperly handled IOCTL calls.